atom feed41 messages in net.sourceforge.lists.courier-usersRe: [courier-users] breaking smtp
FromSent OnAttachments
FMOct 30, 2007 2:06 pm 
Jeff JansenOct 30, 2007 9:22 pm 
cour...@thefreecat.orgOct 31, 2007 4:05 am 
gor...@bobich.netOct 31, 2007 4:32 am 
cour...@thefreecat.orgOct 31, 2007 5:11 am 
gor...@bobich.netOct 31, 2007 5:57 am 
João ValeOct 31, 2007 6:12 am 
gor...@bobich.netOct 31, 2007 6:24 am 
Arturo 'Buanzo' BusleimanOct 31, 2007 6:34 am 
gor...@bobich.netOct 31, 2007 7:03 am 
FMOct 31, 2007 7:24 am 
gor...@bobich.netOct 31, 2007 7:35 am 
Gordon MessmerNov 1, 2007 9:20 pm 
gor...@bobich.netNov 2, 2007 9:43 am 
Arturo 'Buanzo' BusleimanNov 2, 2007 9:50 am 
gor...@bobich.netNov 2, 2007 10:10 am 
Gordon MessmerNov 2, 2007 2:01 pm 
Gordan BobicNov 2, 2007 2:49 pm 
Alessandro VeselyNov 3, 2007 2:44 pm 
Gordon MessmerNov 3, 2007 5:59 pm 
Jérôme BlionNov 3, 2007 6:16 pm 
Gordan BobicNov 4, 2007 1:19 am 
Gordan BobicNov 4, 2007 1:31 am 
Arturo 'Buanzo' BusleimanNov 4, 2007 5:15 am 
Arturo 'Buanzo' BusleimanNov 4, 2007 5:23 am 
Gordon MessmerNov 4, 2007 4:32 pm 
Jérôme BlionNov 4, 2007 4:52 pm 
Alessandro VeselyNov 4, 2007 10:40 pm 
Bernd WurstNov 4, 2007 11:09 pm 
Lisa MuirNov 4, 2007 11:51 pm 
gor...@bobich.netNov 5, 2007 1:38 am 
gor...@bobich.netNov 5, 2007 1:47 am 
Lisa MuirNov 5, 2007 4:09 am 
gor...@bobich.netNov 5, 2007 4:41 am 
Lisa MuirNov 5, 2007 4:57 am 
gor...@bobich.netNov 5, 2007 5:36 am 
Harry DuncanNov 5, 2007 6:22 am 
Alessandro VeselyNov 5, 2007 8:16 am 
Alessandro VeselyNov 5, 2007 9:08 am 
Bernd WurstNov 5, 2007 12:44 pm 
Alessandro VeselyNov 6, 2007 12:30 am 
Subject:Re: [courier-users] breaking smtp
From:Bernd Wurst (ber@bwurst.org)
Date:Nov 5, 2007 12:44:54 pm
List:net.sourceforge.lists.courier-users

Hi.

Am Montag, 5. November 2007 schrieb Alessandro Vesely:

SPF can only get spread if the forwarding-problem gets solved. SRS is a proposition for this but is not that accepted (see, courier doesn't support it because Sam calls it broken (iirc)).

IMHO forwarding is not a problem. Although I admit I had to amend a few scripts, typically adding a "-f simp@example.com" in the relevant command line, where <simp@example.com> is delivered to the person who can remove that command line (me, in my case).

When a forwarding fails, I just remove it. If a DSN is required I send it manually. In facts, I have no automated methods to add forwarding rules.

Ehm, I won't call this a useful way to go. If you get more than a bounce a week, this starts buggin', doesn't it? :)

So if one enforces SPF (or, rejects messages with failed SPF checks), he relies on every one else implements SRS (or something similar) or breaks regular forwarding to his host.

Yes, people cannot illegally forward foreign messages. That is consistent with European privacy rules.

I think it's not. Forwards that are set up by the recipient shouldn't be illegal. This problem is IMHO exactly what SRS tries to resolve. If one of my customers forwards mail to his other account at some other company, the destination server rejects my message because the sender's address is still set to the original sender (that sent the message to me) and I am not listed as a valid sender for the sender's domain. That's a really common scenario and requires that the forwarding mail server rewrites the envelope sender to end up in his own domain that allows him to send mail (SPF-wise).

But simply rewriting the sender breaks automatic bounce processing.

For sure, I could use some per-user-script outside the mail server that does SRS (or any similar way) but that's not really easy to maintain.

SPF standalone doesn't really help anything.

It helps the owner of a domain to avoid that others abuse of it.

And causes that his mail not to be forwarded if the destination is just a forward to another host and the forwarder does no sender rewriting.

I meant "SPF without widespread SRS" when I wrote "SPF standalone".

Its relevance as an anti-spam device is to force spammers to send from their own domains, so that receivers know where they may claim damages. (Which will only happen when all hosts have SPF records)

Absolutely, SPF should never be considered an anti-spam device. It was developed as anti-forgery device and that's what it is.

In a world free of forged e-mail sender addresses, fighing spam is much easier to do, but SPF does nothing against spam.

cu, Bernd